31X + 6X FP

白崎桑

Eset小粉絲 发表于 2021-10-17 15:25
ESET处理用户上报不知道是何年何月的事情了

上报了11次只有三次收到了回复

Eset小粉絲

白崎桑 发表于 2021-10-17 15:26
上报了11次只有三次收到了回复

批量样本我觉得不必期待了

BitterLotus

是的，你没看错，NLL Kill all，应该是主动启发式分析的锅

dreams521

我的邮件为什么从来不回复

白崎桑

dreams521 发表于 2021-10-17 16:44
我的邮件为什么从来不回复

卡巴？是不是没加关键字

Nocria

IKARUS - 35/37

1. [17.10.2021 17:10:00] On-demand scan started: "user_defined"
   
2. [17.10.2021 17:10:00] Found, 0.00s, SigName: "Trojan.Win32.VB", SigId: 338434868, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\0209eb3003a25901aa08ad9ac3056abe"
   
3. [17.10.2021 17:10:00] Found, 0.00s, SigName: "Trojan.Shellobject", SigId: 338942661, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\0823989b9c629904aab32af50f3cd990"
   
4. [17.10.2021 17:10:00] Found, 0.16s, SigName: "Trojan.Win32.Genome", SigId: 856978, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\2c8b52278372aa2852913394a2f53e32"
   
5. [17.10.2021 17:10:00] Found, 0.16s, SigName: "Trojan.FormatC", SigId: 2426053, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\24403be4ddc704c40fbb56615c858bd4"
   
6. [17.10.2021 17:10:00] Found, 0.15s, SigName: "Trojan.Win32.Delf", SigId: 338575189, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\3c8aad2eb9ca4f33477338672d85f50b"
   
7. [17.10.2021 17:10:00] Found, 0.156s, SigName: "Trojan.Win32.Pakes", SigId: 2693320, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\22184e0bab738d05b3cfa1541b1bff98"
   
8. [17.10.2021 17:10:00] Found, 0.156s, SigName: "Trojan-Downloader.Win32.Dadobra", SigId: 3586209, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\3e2cd5c2271c5ce2520ca462dae7808a"
   
9. [17.10.2021 17:10:00] Found, 0.250s, SigName: "Trojan.Win64.Rootkit", SigId: 3777926, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\3d5e3c20aed5771f5ddbd89c2ff6403a"
   
10. [17.10.2021 17:10:00] Found, 0.281s, SigName: "Trojan.Hijacker", SigId: 4164057, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\3a357c83cc3e5f7361d451beec8ea9e2"
    
11. [17.10.2021 17:10:00] Found, 0.109s, SigName: "Trojan.Win32.Bublik", SigId: 2768367, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\4b9d3dde9b7bfa2413e4e7ade865f9d3"
    
12. [17.10.2021 17:10:00] Found, 0.63s, SigName: "Trojan.MSIL.RedLine", SigId: 4232027, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\51b986922f7e81cbe0baed7b66475617"
    
13. [17.10.2021 17:10:00] Found, 0.141s, SigName: "Trojan-Dropper.Delf", SigId: 2643795, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\548f8e3813bc80bdda06c09b25180246"
    
14. [17.10.2021 17:10:00] Found, 0.94s, SigName: "Trojan.Win32.Krypt", SigId: 4226854, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\5c6e37aa484e41a130f4e3cc81f06e3d"
    
15. [17.10.2021 17:10:02] Found, 2.250s, SigName: "Gen.Mint.Zard", SigId: 4229992, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\46c77fce0e5f0ebb3db1197c62c2dc5e"
    
16. [17.10.2021 17:10:02] Found, 2.78s, SigName: "Gen.Mint.Zard", SigId: 4229992, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\64d2f0134f6023d2d57139fff80fd130"
    
17. [17.10.2021 17:10:02] Found, 0.125s, SigName: "Trojan-Spy.Agent", SigId: 2924825, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\6722f5d5604aac4ee5ffbd5a8ec6b89d"
    
18. [17.10.2021 17:10:02] Found, 0.63s, SigName: "Trojan.Win64.Themida", SigId: 4055706, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\793705e62b00c9a743421487b4958d77"
    
19. [17.10.2021 17:10:02] Found, 0.32s, SigName: "Trojan.Msil", SigId: 2132892, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\8025983bac49e738f7dc5fb44bcc2de2"
    
20. [17.10.2021 17:10:02] Found, 0.31s, SigName: "Trojan-Dropper.Agent", SigId: 2078107, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\815fdc2268558ca1f30aa339e7477cf9"
    
21. [17.10.2021 17:10:02] Found, 0.31s, SigName: "Trojan.Dropper", SigId: 4190377, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\8c919fd82138854295ac894235ab6cfb"
    
22. [17.10.2021 17:10:02] Found, 0.15s, SigName: "Trojan.Win32.Crypt", SigId: 338942976, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\943349887991c208b2a6ebb258143797"
    
23. [17.10.2021 17:10:02] Found, 0.15s, SigName: "Trojan.Win32.Menti", SigId: 2787725, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\9bc9646bd4144a024fdb8fea8275ce73"
    
24. [17.10.2021 17:10:02] Found, 0.00s, SigName: "Worm.Win32.Rebhip", SigId: 2163363, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\a17026b62d9e4f1a08f4b1e1d2bce8b5"
    
25. [17.10.2021 17:10:02] Found, 0.16s, SigName: "Trojan.Win32.ServStart", SigId: 3824834, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\a4fb3e868e6d59b57fae1cf9e58540e4"
    
26. [17.10.2021 17:10:03] Found, 2.812s, SigName: "Gen.Mint.Zard", SigId: 4229992, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\4f515ed37449e153fd45d6d87e8f595b"
    
27. [17.10.2021 17:10:03] Found, 0.734s, SigName: "Trojan.Win32.VMProtect", SigId: 3563917, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\bca980cb170dc98089a9a9a005694878"
    
28. [17.10.2021 17:10:03] Found, 0.297s, SigName: "Worm.Win32.Citeary", SigId: 1678741, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\bda6860a95000e0651ce47ebd0db0535"
    
29. [17.10.2021 17:10:03] Found, 0.32s, SigName: "Trojan.SPY.Bobik", SigId: 3414438, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\d242ae35427fef617bb7f559f4cf913a"
    
30. [17.10.2021 17:10:03] Found, 0.78s, SigName: "Trojan.Hijacker", SigId: 4164057, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\dfd1de045227949938591e5c46da33eb"
    
31. [17.10.2021 17:10:03] Found, 0.62s, SigName: "Trojan.Win32.Genome", SigId: 856978, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\ee0428a709c545b2f508b0f3c472a92d"
    
32. [17.10.2021 17:10:03] Found, 0.141s, SigName: "PUA.EnigmaProtector", SigId: 3558052, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\f0e596b48c02ef8560930af0e4159b1e"
    
33. [17.10.2021 17:10:03] Found, 0.172s, SigName: "Trojan.MSIL.Vmprotect", SigId: 4160682, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\fb374a95362e53aae5bf3ba09c301528"
    
34. [17.10.2021 17:10:03] Found, 0.62s, SigName: "Trojan.SuspectCRC", SigId: 1818474, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\ffd9120d9195e175a0cd753bed876c93"
    
35. [17.10.2021 17:10:04] Found, 4.00s, SigName: "Gen.Mint.Zard", SigId: 4229992, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\66e0b4e8600d9ed0573c99e21bba073d"
    
36. [17.10.2021 17:10:05] Found, 2.344s, SigName: "Gen.Mint.Zard", SigId: 4229992, Type: "VIRUS", File: "C:\Users\promi\Desktop\Samples\bcfcd4d9c72a016df7a834a57e3b57a8"
    
37. [17.10.2021 17:10:05] On-demand scan FINISHED: "user_defined"
    
38. [17.10.2021 17:10:05] ----------------------------------------------------
    
39. [17.10.2021 17:10:05] Directories scanned: 1
    
40. [17.10.2021 17:10:05] Files scanned: 37
    
41. [17.10.2021 17:10:05] Virus found: 35
    
42. [17.10.2021 17:10:05] ----------------------------------------------------
    

复制代码

秋日之殇

白崎桑 发表于 2021-10-17 16:51
卡巴？是不是没加关键字

这两天newvirus邮箱似乎出问题了

love642108192

BD-GZ，for malware：【kill 29x，miss 2x】，and false positive 4x

白崎桑

秋日之殇 发表于 2021-10-17 17:20
这两天newvirus邮箱似乎出问题了

好像有三四天没有自动回复了

love642108192

白崎桑 发表于 2021-10-17 17:42
好像有三四天没有自动回复了

还是卡巴好，BD从来没给我回复过